5adb0af29deaed1fe4af79e5880e0188a184269d7aae287b8f8b01ae271a5923 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5adb0af29deaed1fe4af79e5880e0188a184269d7aae287b8f8b01ae271a5923
Size

1.2MB
MD5

b7a882531f21f4ee67f38ebb4d45658f
SHA1

e049e1f50863ab1f925a9d3807368f18b92ef49d
SHA256

5adb0af29deaed1fe4af79e5880e0188a184269d7aae287b8f8b01ae271a5923
SHA512

f3cd272944f8954d87db437b55746a2482521fa4cddd9f0a36e8e54ea30273728f8696fd0e79fbe9b9add4ec9fc376b33505ef81f991ee12b0d643a1d0e24c3d
SSDEEP

24576:Z+o1E/8hiStsYQoeGAS3ICmjsmEyj22HwUM1BNb7DXLTZ03czk5kuqTMCDRG:ZLG/8hh1QOAS3zmpDBMZrXJccw6zDRG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5adb0af29deaed1fe4af79e5880e0188a184269d7aae287b8f8b01ae271a5923

Files

5adb0af29deaed1fe4af79e5880e0188a184269d7aae287b8f8b01ae271a5923
.exe windows x86

6ec3e0af9bd2249613fe42285c9d599b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

SetWindowsHookExA

gdi32

GetStockObject

comdlg32

GetSaveFileNameA

winspool.drv

EnumPrintersA

advapi32

RegSetValueA

shell32

ShellExecuteExA

comctl32

ImageList_AddMasked

oledlg

ord8

ole32

CoTaskMemAlloc

olepro32

ord253

oleaut32

SysAllocStringLen

odbc32

ord10

wsock32

closesocket

wininet

InternetGetLastResponseInfoA

imm32

ImmAssociateContext

Sections

.text
Size: 1.2MB - Virtual size: 5.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 25KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE